Evert Pot

This account is no longer active. Find me here:

Mastadon: @[email protected] /

[Evert Pot @evertp]

If I stopped following you on Twitter it might mean I've already found you on Mastadon and I'm slowly shutting down here!

[Evert Pot @evertp]

@AmanAlam @darcy Couldn't have planned it better 😂

[Evert Pot @evertp]

At work I've been working on a safer, faster NPM mirror and place for teams to publish private packages. After roughly 8 months we're done! It's been a ride.

https://t.co/taHIjuHs4H

#vlt #npm

[Darcy Clarke @darcy]

Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA!

A drop-in npm replacement, built so nothing runs on your machine just because you typed install.

→ faster delivery
→ malware blocking at the registry layer
→ graph-native querying

[Darcy Clarke @darcy]

Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA!

A drop-in npm replacement, built so nothing runs on your machine just because you typed install.

→ faster delivery
→ malware blocking at the registry layer
→ graph-native querying

[Evert Pot @evertp]

Wow accidentally posted here instead of mastodon/bsky because I had a tab open and wasn't looking at the URL.

[Evert Pot @evertp]

@0xPrajwal_ Both fine

[Evert Pot @evertp]

Woah, someone wrote an article about my homelab project

https://t.co/ZuxbXi76eR

[Evert Pot @evertp]

@andrii_sherman The main issue is that on a npm install without a lockfile, a JSON file gets downloaded called a packument that is a combination of all your package.json files for every release you've ever done.

(yeah this is terribly inefficient)

[Evert Pot @evertp]

@DrizzleORM @MarkSteadmanWD Are you publishing every commit?

[Darcy Clarke @darcy]

tldr; if you used @vltpkg as your package manager, then you were protected the minute @SocketSecurity flagged the malicious packages in the `axios` attack yesterday. The best time to switch your package manager was 48hrs ago, the next best time is right now.

More below: https://t.co/7ePAlJT54t

[Evert Pot @evertp]

I built a browser-based Gopher client / proxy in Node.js. Go check it out!

https://t.co/PX8uPYhF1q

[Evert Pot @evertp]

@ID_AA_Carmack The key thing is always consent

[Evert Pot @evertp]

Yesterday we saw the most _new_ NPM packages being released in the last 12 months, at 2804 packages.

Pretty steady upward trajectory here, unlike we've ever seen. This graph is spiky because it's daily data and weekends are lower.

[Evert Pot @evertp]

@GarfieldEATSinc I could tell from the unhingedness

[Cory Doctorow NO LONGER ON TWIT TER @doctorow]

"There is nothing special about Elon Musk, Sam Altman, or Mark Zuckerberg. Accepting that requires you to also accept that the world itself is not one that rewards the remarkable, or the brilliant, or the truly incredible, but those who are able to take advantage of opportunities, which in turn leads to the horrible truth that those who often have the most opportunities are some of the most boring and privileged people alive."

-@EdZitron, You Can't Make Friends With The Rockstars
https://t.co/6KWThnQZv7

[Evert Pot @evertp]

I just blogged: "New Structured Fields RFC out, and so is my Javascript package" https://t.co/ZOXG5dfHO5

[Evert Pot @evertp]

I just blogged "Hello world! meet Kian: https://t.co/Phzc4IErPY"

[Evert Pot @evertp]

@mekunuk hey did you lose your drivers license?

[Evert Pot @evertp]

Funny but also people are dicks in the comments.

I still thinks tabs need to be rethought in modern browsers. This usage pattern is very common and browsers don't cater people well:

https://t.co/5Y9CYIq6oo

[Evert Pot @evertp]

But! It's 8 years since a release. That seems long for a security-related library.

How do you check password strength?

#infosec #websec #security

[Evert Pot @evertp]

Dear #lazyweb

I want to make sure users use strong passwords when creating accounts. I don't want to just check password length and presence of numbers/symbols. I think it's better to check entropy.

This library seems to be exactly what I need:

https://t.co/aNA85Yyjui